Got it. Much better, I do want to keep email verification and terms of service.
I notice they're turned off here.
32 caught as of now, but I suspect they're low hanging fruit that would probably have been caught by SFS.
The users that caused me problems recently had cryptic usernames, with the gmail address the same as the username.
The message was in Chinese (I think) with some kind of university name at the end of the post, and they were breezing through the SFS Xenforo deal.
I was disappointed with the Xenforo - StopForumSpam setup, mainly because of the inability of turning off usernames. I had legitimate users being kicked into moderation or rejected with usernames as simple as Kevin7 or something like that.
IMO, usernames are a useless trigger, and IP's are getting the same way (except in the case of server farms). Email addresses are pretty solid, once an email address has been used a few times, you can count on it being reliably bad.
Anyway, thanks.
BTW, no bad guys got through last night.